Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          aP9UY7MxOz0LrYdtF3t4XKFYjbL7ypcsjX3Yualho5w=
Subject key identifier:   E9:48:6A:9C:5A:12:03:F4:62:8F:58:DB:15:1F:59:05:8E:CD:36:22
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       418844051CDD51FCA7B44DBEC096699219E81947
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Tue 12 Sep 2023 18:00:00 +0000
ROA not before:           Tue 12 Sep 2023 17:55:00 +0000
ROA not after:            Tue 10 Sep 2024 18:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:44:05:1c:dd:51:fc:a7:b4:4d:be:c0:96:69:92:19:e8:19:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Sep 12 17:55:00 2023 GMT
            Not After : Sep 10 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:e8:21:10:16:f5:93:e1:a9:cc:4b:ba:18:
                    5a:32:f5:39:81:79:35:58:a3:a2:a1:c8:3c:b6:f5:
                    f1:f4:e9:56:4a:f0:06:bb:78:e2:87:f7:b0:b5:0a:
                    22:3c:af:34:76:51:6f:c8:bf:d6:48:2e:56:01:6d:
                    a7:53:07:e2:0b:30:a5:3c:7d:b8:79:37:24:67:98:
                    06:54:ff:0c:3c:5c:ad:17:bb:91:2d:fc:a7:7d:87:
                    71:16:09:e2:88:2a:81:20:00:3a:4e:8e:fb:e5:e7:
                    80:2f:41:23:59:a0:12:d7:73:32:e2:da:9e:e7:84:
                    d4:ae:e7:bd:4c:66:fd:3c:55:27:fb:9c:82:0b:ea:
                    f0:10:a8:2f:8a:20:89:05:e0:0a:03:c4:b7:74:d0:
                    e0:55:ba:e8:e1:1f:74:a6:0f:16:22:aa:eb:db:f9:
                    1c:20:79:ae:65:25:73:af:2f:da:93:36:c6:8e:3e:
                    34:26:42:37:9f:a7:6e:b3:82:de:0d:ee:98:6d:77:
                    fa:83:7c:c0:67:cb:d9:bc:66:d4:7c:1a:02:d4:82:
                    71:f7:31:04:85:c9:4d:f9:2f:37:64:01:36:a4:52:
                    bd:c7:52:89:d2:ba:87:f6:15:ef:2b:9b:38:a1:5b:
                    c9:f5:f6:e4:93:d3:f7:91:dd:aa:dc:d2:cf:1f:64:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:48:6A:9C:5A:12:03:F4:62:8F:58:DB:15:1F:59:05:8E:CD:36:22
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a383030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:37:80:af:42:ba:44:bc:dd:ec:96:a4:bb:0f:b2:7a:5d:
         ba:15:fe:34:74:69:32:7b:ad:ef:cb:92:19:5c:24:9e:f4:6d:
         5c:d6:5a:c4:25:6c:fa:f1:6e:f6:01:f8:78:5d:70:05:bf:6f:
         19:1c:1e:71:73:28:4a:6a:ad:23:e8:cc:d1:cb:46:7b:3c:d2:
         c4:4b:c2:cd:eb:a7:f7:5b:73:83:0a:b6:0d:2f:39:81:be:b7:
         10:47:3c:2c:d0:a5:b9:1d:49:67:d4:f6:1d:ff:6b:81:88:14:
         2b:72:f9:c4:48:f2:dd:c0:3d:cd:6c:f5:4d:28:34:ba:2f:8b:
         fa:31:b6:0a:85:d4:44:3c:89:c5:51:dd:6c:dc:b4:a2:68:7f:
         7e:11:1f:e8:c3:eb:9f:02:d6:7f:8e:c0:31:18:2a:0e:c2:f1:
         2c:7c:f5:62:0a:6a:ec:63:d0:ca:eb:c1:51:16:e3:93:03:df:
         04:f1:fc:0a:f7:d5:46:5b:0f:ea:3d:11:dc:0a:81:a1:c2:05:
         43:e2:8a:f9:62:1e:a6:35:28:5b:c2:9d:89:86:d4:21:df:b3:
         f7:b6:1c:27:27:ad:7e:2b:38:c5:5d:2b:c6:84:81:de:7f:fb:
         0b:27:ab:2d:ee:fb:91:be:42:b1:3c:cc:08:63:90:dc:57:95:
         90:a7:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org